Skip to content

Commit 0b0f8b8

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-pcrj-w3m4-9qfj GHSA-q476-2364-vgv3 GHSA-84xh-pwc6-7g4g GHSA-26hx-622f-3855 GHSA-2q3p-f6j6-9qhj GHSA-344h-xj76-vwrq GHSA-3r8r-ch94-c42m GHSA-44q9-wm73-vrf7 GHSA-7cr9-pfmp-g6m2 GHSA-7fmc-f7mg-gr67 GHSA-f3fp-jhfc-jp8q GHSA-fvx8-q97q-cw73 GHSA-gwq9-wpwc-v9cf GHSA-hr5f-g8f8-p354 GHSA-jcc8-69x6-295g GHSA-mv5g-cf64-38cv GHSA-qrpj-fx7w-27q9 GHSA-vr2h-fpfm-62g7 GHSA-vw27-7cgv-4xfw GHSA-w9rv-x77p-3mvc
1 parent e53fa5f commit 0b0f8b8

File tree

20 files changed

+311
-34
lines changed

20 files changed

+311
-34
lines changed

‎advisories/unreviewed/2022/10/GHSA-pcrj-w3m4-9qfj/GHSA-pcrj-w3m4-9qfj.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-pcrj-w3m4-9qfj",
4-
"modified": "2022-10-06T00:00:55Z",
4+
"modified": "2025-11-12T15:31:27Z",
55
"published": "2022-10-01T00:00:18Z",
66
"aliases": [
77
"CVE-2022-35155"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://github.com/shellshok3/Cross-Site-Scripting-XSS/blob/main/Bus%20Pass%20Management%20System%201.0.md"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "http://bus.com"

‎advisories/unreviewed/2022/10/GHSA-q476-2364-vgv3/GHSA-q476-2364-vgv3.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-q476-2364-vgv3",
4-
"modified": "2022-10-06T00:00:55Z",
4+
"modified": "2025-11-12T15:31:27Z",
55
"published": "2022-10-01T00:00:18Z",
66
"aliases": [
77
"CVE-2022-35156"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://packetstormsecurity.com/files/168555/Bus-Pass-Management-System-1.0-Cross-Site-Scripting.html"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.exploit-db.com/exploits/50543"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "http://bus.com"

‎advisories/unreviewed/2025/02/GHSA-84xh-pwc6-7g4g/GHSA-84xh-pwc6-7g4g.json‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-84xh-pwc6-7g4g",
4-
"modified": "2025-11-03T21:32:35Z",
4+
"modified": "2025-11-12T15:31:27Z",
55
"published": "2025-02-05T18:34:46Z",
66
"aliases": [
77
"CVE-2025-23419"
@@ -38,7 +38,8 @@
3838
],
3939
"database_specific": {
4040
"cwe_ids": [
41-
"CWE-287"
41+
"CWE-287",
42+
"CWE-613"
4243
],
4344
"severity": "MODERATE",
4445
"github_reviewed": false,

‎advisories/unreviewed/2025/11/GHSA-26hx-622f-3855/GHSA-26hx-622f-3855.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-26hx-622f-3855",
4-
"modified": "2025-11-10T18:30:34Z",
4+
"modified": "2025-11-12T15:31:28Z",
55
"published": "2025-11-10T15:31:05Z",
66
"aliases": [
77
"CVE-2025-12480"
@@ -31,6 +31,10 @@
3131
"type": "WEB",
3232
"url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0008.md"
3333
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-12480"
37+
},
3438
{
3539
"type": "WEB",
3640
"url": "https://www.triofox.com"

‎advisories/unreviewed/2025/11/GHSA-2q3p-f6j6-9qhj/GHSA-2q3p-f6j6-9qhj.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2q3p-f6j6-9qhj",
4-
"modified": "2025-11-11T18:30:16Z",
4+
"modified": "2025-11-12T15:31:28Z",
55
"published": "2025-11-11T18:30:16Z",
66
"aliases": [
77
"CVE-2025-13020"
88
],
99
"details": "Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145 and Firefox ESR < 140.5.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -28,8 +33,10 @@
2833
}
2934
],
3035
"database_specific": {
31-
"cwe_ids": [],
32-
"severity": null,
36+
"cwe_ids": [
37+
"CWE-416"
38+
],
39+
"severity": "HIGH",
3340
"github_reviewed": false,
3441
"github_reviewed_at": null,
3542
"nvd_published_at": "2025-11-11T16:15:39Z"

‎advisories/unreviewed/2025/11/GHSA-344h-xj76-vwrq/GHSA-344h-xj76-vwrq.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-344h-xj76-vwrq",
4+
"modified": "2025-11-12T15:31:29Z",
5+
"published": "2025-11-12T15:31:29Z",
6+
"aliases": [
7+
"CVE-2025-62876"
8+
],
9+
"details": "A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62876"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62876"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-250"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-11-12T13:15:46Z"
35+
}
36+
}

‎advisories/unreviewed/2025/11/GHSA-3r8r-ch94-c42m/GHSA-3r8r-ch94-c42m.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3r8r-ch94-c42m",
4-
"modified": "2025-11-12T09:30:27Z",
4+
"modified": "2025-11-12T15:31:29Z",
55
"published": "2025-11-12T09:30:27Z",
66
"aliases": [
77
"CVE-2025-64403"
88
],
99
"details": "Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of \"external data sources\". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links \nto be loaded without prompt.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -31,7 +36,7 @@
3136
"cwe_ids": [
3237
"CWE-862"
3338
],
34-
"severity": null,
39+
"severity": "HIGH",
3540
"github_reviewed": false,
3641
"github_reviewed_at": null,
3742
"nvd_published_at": "2025-11-12T09:15:41Z"

‎advisories/unreviewed/2025/11/GHSA-44q9-wm73-vrf7/GHSA-44q9-wm73-vrf7.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-44q9-wm73-vrf7",
4+
"modified": "2025-11-12T15:31:29Z",
5+
"published": "2025-11-12T15:31:29Z",
6+
"aliases": [
7+
"CVE-2025-11565"
8+
],
9+
"details": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web Admin user on the local network tampers with the POST/REST/UpdateJRE request payload.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11565"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-315-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-315-01.pdf"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-22"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-11-12T14:15:45Z"
35+
}
36+
}

‎advisories/unreviewed/2025/11/GHSA-7cr9-pfmp-g6m2/GHSA-7cr9-pfmp-g6m2.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-7cr9-pfmp-g6m2",
4-
"modified": "2025-11-12T09:30:27Z",
4+
"modified": "2025-11-12T15:31:29Z",
55
"published": "2025-11-12T09:30:27Z",
66
"aliases": [
77
"CVE-2025-64401"
88
],
99
"details": "Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links \nto be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used \"floating frames\" linked to external files would \nload the contents of those frames without prompting the user for \npermission to do so.\n\nThis issue affects Apache OpenOffice: through 4.1.15.\n\nUsers are recommended to upgrade to version 4.1.16, which fixes the issue.\n\nThe LibreOffice suite reported this issue as CVE-2023-2255",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -27,7 +32,7 @@
2732
"cwe_ids": [
2833
"CWE-862"
2934
],
30-
"severity": null,
35+
"severity": "HIGH",
3136
"github_reviewed": false,
3237
"github_reviewed_at": null,
3338
"nvd_published_at": "2025-11-12T09:15:40Z"

‎advisories/unreviewed/2025/11/GHSA-7fmc-f7mg-gr67/GHSA-7fmc-f7mg-gr67.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-7fmc-f7mg-gr67",
4-
"modified": "2025-11-12T12:30:26Z",
4+
"modified": "2025-11-12T15:31:29Z",
55
"published": "2025-11-12T12:30:26Z",
66
"aliases": [
77
"CVE-2025-59118"
88
],
99
"details": "Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 24.09.03.\n\nUsers are recommended to upgrade to version 24.09.03, which fixes the issue.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -43,7 +48,7 @@
4348
"cwe_ids": [
4449
"CWE-434"
4550
],
46-
"severity": null,
51+
"severity": "HIGH",
4752
"github_reviewed": false,
4853
"github_reviewed_at": null,
4954
"nvd_published_at": "2025-11-12T10:15:43Z"

0 commit comments

Comments
 (0)